I've blown the dust off my NAS and am upgrading it from Debian 10 (Buster) to Debian 13 (Trixie) using only an LLM (GPT-4.1 via GitHub Copilot) to help me - AMA!
Listened to
Breaking Change v42.0.1 - Scott Werner: Ignore all previous instructions
by

Post details
🔥Hotfix🔥 is back with a new guest! Scott Werner is the CEO of Sublayer, helps organize the Artificial Ruby meetup in NYC, and is the author of the extremely…

Listened to
Kate Winslet (Christmas Special) | Off Menu with Ed Gamble and James Acaster

Post details
Listen to Kate Winslet (Christmas Special) from Off Menu with Ed Gamble and James Acaster. Oscar-winning acting royalty Kate Winslet joins us for a Christmas Special in the Dream Restaurant. But can James keep his Eternal Sunshine questions to himself? Kate Winslet’s directorial debut ‘Goodbye, June’ is in cinemas now and on Netflix from 24 December. Watch it here. Watch the video version of this episode on the Off Menu YouTube on Thu 18 Dec. Off Menu is now on YouTube: @offmenupodcastFollow Off Menu on Instagram and TikTok: @offmenuofficial.And go to our website www.offmenupodcast.co.uk for a list of restaurants recommended on the show.Off Menu is a comedy podcast hosted by Ed Gamble and James Acaster.Produced, recorded and edited by Ben Williams for Plosive.Video production by Megan McCarthy for Plosive, and Pippa Brown.Artwork by Paul Gilbey (photography and design).

Reposted
rob pike (@robpike.io)

Post details
Fuck you people. Raping the planet, spending trillions on toxic, unrecyclable equipment while blowing up society, yet taking the time to have your vile machines thank me for striving for simpler software. Just fuck you. Fuck you all. I can't remember the last time I was this angry.
Listened to
The history of servers, the cloud, and what’s next – with Oxide
by

Post details
Bryan Cantrill explains how decades of server and cloud evolution shaped modern infrastructure and what today’s engineers should learn from it.

Reposted
Andrew Nesbitt (@andrewnez@mastodon.social)
Post details
We spent thirty years building tools to keep humans from falling into dependency hell, only to build a machine that jumps into the pit voluntarily.
Listened to
"Tig Notaro" on Where Everybody Knows Your Name

Post details
<p>As a cancer survivor, comedian Tig Notaro has explored her own mortality in acclaimed releases such as “Live” and “Boyish Girl Interrupted.” Now she’s a producer of an Apple TV documentary called “Come See me in The Good Light” that examines the final days of a close friend, the poet Andrea Gibson. Tig talks to Ted Danson about how this unique project came about, the changes it’s inspired in her own life, and much more. </p><p> </p><p>Like watching your podcasts? Visit <a href="http://youtube.com/teamcoco">http://youtube.com/teamcoco</a> to see full episodes. </p> <p>Hosted by Simplecast, an AdsWizz company. See <a href="http://pcm.adswizz.com">pcm.adswizz.com</a> for information about our collection and use of personal data for advertising.</p>

Listened to
Beyond the Code: How we're shipping faster with Claude Code and Git Worktrees by The Debrief by incident.io

Post details
We’re running a short mini-series on The Debrief podcast called Beyond the code, where we interview our engineers about what it’s really like to build at incident.io.In this episode, Product Engineer Rory B. and CTO Pete discuss how we’re using Claude Code and Git Worktrees to allow engineers to build multiple features in parallel. You can read more on our blog.

Listened to
Open Source Security: Daniel Thompson answers: Does the CRA apply to Santa?

Post details
Josh welcomes back Daniel Thompson explore the rather silly question of whether Santa Claus needs to be compliant with the Cyber Resilience Act (CRA). This episode was intended to be silly, but it ended up being an incredibly interesting conversation. Daniel explained a great deal about how the CRA works and how it could apply to Santa Claus. The TL;DR is even if he's giving out free stuff, the CRA almost certainly applies. Daniel also fills us in on his book (you can email Josh to enter into a drawing for a copy), and his work on web browsers for the CRA. It's an incredibly informative discussion. The show notes and blog post for this episode can be found at
Reposted
Charlie Stross (@cstross@wandering.shop)
Post details
It's December 23rd! Have a Merry Christmas Adam everybody! (Always comes before Christmas Eve and is generally unsatisfying.)
Reposted
Neil Macy (@neilgmacy@mastodon.social)
Post details
Saw an advert for a Trainline AI assistant thing, with a disclaimer at the bottom saying it’s AI, so might not actually be right. Why is it okay for AI to be unreliable? Why are we collectively so accepting of the idea?
Listened to
Cup o' Go | 🤐 Three goroutines may keep a secret, even if none are dead. Plus, 💉 dependency injection is horrible—change my mind!

Post details
Go 1.26rc1 is outBook: Gist of Go: Concurrency by Anton Zhiyanov😶 Blog: Go feature: Secret mode by Anton ZhiyanovNon-Go: Pixnapping🧋 Accepted: Make all "bubbles" inherited across goroutines🌩️ Lightning Round🥐 Bun v2 coming?💉 Interview: Go dependency injection at Uberuber-go/fxLet a 1,000 flowers...

Listened to
Break | Matt's Getting Canceled!

Post details
Welcome back to Break, a Fallthrough aftershow! In this episode, the panel continues their conversation from Fallthrough #50.Enjoying the aftershow? Let us know on social media! If you prefer to wa...

Listened to
Fallthrough | Why Is Tech So Mid?

Post details
In the tech industry, we talk about how exceptional and innovative we are. But are we really? In this episode, Kris and Matt explore why they see the industry as pretty mid and how things should be...

Reposted
Marcus Noble (@averagemarcus.bsky.social)

Post details
Ugh! Racists need to just fuck off!
Reposted
Jordan Harband (@jordan.har.band)

Post details
I made something new: an eslint plugin to validate your npm ecosystem lockfiles! It supports npm, pnpm, yarn, bun, and vlt, and it's already helped find a supply chain security attack vector inside a fortune 500 tech company. https://www.npmjs.com/package/eslint-plugin-lockfile
Week Notes 25#51 (3 mins read).
What happened in the week of 2025-12-15?
Listened to
State of the "log" 2025 (Changelog & Friends #122)

Post details
Our 8th annual year-end wrap-up is here! We’re featuring 8 listener voicemails, dope Breakmaster Cylinder remixes & our favorite episodes of the year. Thanks for listening! 💚
Listened to
"Kumail Nanjiani Returns Again" on Conan O'Brien Needs a Friend

Post details
<p>Comedian and actor Kumail Nanjiani feels twitterpated about being Conan O’Brien’s friend.</p><p>Kumail sits down with Conan to discuss his new special Kumail Nanjiani: Night Thoughts, old lady drug dealers, how he’s been received internationally, and the real-life coming of age experience that inspired a favorite Silicon Valley scene.</p><p> </p><p>For Conan videos, tour dates and more visit <a href="http://TeamCoco.com">TeamCoco.com</a>.</p><p>Got a question for Conan? Call our voicemail: (669) 587-2847.</p><p><p>Get access to all the podcasts you love, music channels and radio shows with the SiriusXM App! Get 3 months free using this show link: <a href="https://siriusxm.com/conan">https://siriusxm.com/conan</a>.</p></p> <p>Hosted by Simplecast, an AdsWizz company. See <a href="http://pcm.adswizz.com">pcm.adswizz.com</a> for information about our collection and use of personal data for advertising.</p>

Listened to
David Sheldrick - patch-package by devtools.fm: Developer Tools, Open Source, Software Development

Post details
In this episode we interview David Sheldrick, the creator of patch-package.https://github.com/ds300/patch-package/https://github.com/artsy/eigenArtsy's mobile apphttps://www.artsy.nethttps://pulley.com/Where David is going nexthttps://github.com/artsy/gudetamaA tool David worked on at Artsyhttps://github.com/artsy/eigen/pull/3210Artsy's automated move to strict type checking in their react native apphttps://github.com/ds300/patch-package/pull/295PR to add create issue feature to patch-packagehttps://github.com/ds300/jetztDavid's speed reader chrome extensionhttps://www.npmjs.com/package/ts-nodehttps://deno.land/https://www.rust-lang.org/https://twitter.com/orta/https://ipfs.io/ToolTipsAndrewhttps://relative-ci.com/https://github.com/iamakulov/awesome-webpack-perfhttps://www.npmjs.com/package/speed-measure-webpack-pluginhttps://uiw.tf/Justinhttps://github.com/RobinCsl/awesome-js-tooling-not-in-jshttps://paperclip.devhttps://github.com/phoenixframework/phoenix_live_viewhttps://github.com/nerves-project/nerveshttps://github.com/fhunleth/nerves_livebookDavidhttps://coderwall.com/p/cq_lkg/remapping-caps-lock-key-to-something-more-natural-on-mac-os-xhttps://code.visualstudio.com/docs/editor/userdefinedsnippetshttps://code.visualstudio.com/docs/editor/codebasics#_save-auto-save

Listened to
Agents in the database with Ajay Kulkarni, CEO of Tiger Data (Changelog Interviews #671)

Post details
Ajay Kulkarni from Tiger Data (Co-founder/CEO) is on the pod this week with Adam. He asked him to get vulnerable and trace his path to becoming a CEO. They dig into the themes that have shaped his career, and explore how founder values end up forming company culture (whether you intend them to or not). From his enterpr...
Listened to
Markdown as a CMS is a bad idea - Syntax #964

Post details

Listened to
2025 founders year in review: insights, highlights, and future plans by The Debrief by incident.io

Post details
Three founders, one kitchen table, and a very honest end of year conversation. In this episode we look back on 2025, from moving continents and growing the company at pace, to ski trips that probably should not have happened, live demos that absolutely could have gone wrong, and the small moments that made the year memorable. We talk about how our billboard ideas came to life, what it is really like spending a huge chunk of time hiring, why Pete injured his back standing up, and why Chris’s idea of a death row meal is genuinely upsetting. It is unscripted, a bit chaotic, and a proper look behind the scenes at what the year actually felt like.

Listened to
Breaking Change v40 - Go home Claude, you're drunk
by

Post details
Finally, a recommendation-heavy, full-mailbag show. Been a while. New to the pod are achievements—watch your BreakingScore™ increase each time you write in to…

I have finished reading
Cibola Burn
by
(isbn:9780316217620)
Post details
(isbn:9780316217620)Very cool to see I'm on Golang Weekly's top 10 articles of the year with Go 1.24's go tool is one of the best additions to the ecosystem in years
I'm not surprised given the amount of traffic I've had for this over the year, but it's still cool to see reflected in their stats, too!
Reposted
Renovate (@renovatebot.com)

Post details
FYI: We've changed the `GOSUMDB` environment variable on the Mend-hosted Renovate Cloud infrastructure, which may lead to impact to users with private Go modules. As we've noted in https://github.com/renovatebot/renovate/discussions/40041, this is due to previously used settings leaving users open to supply chain attacks
Listened to
Ep. 38 | Writing for Developers with Piotr Sarna by Overcommitted

Post details
SummaryIn this episode of the Overcommitted Podcast, hosts Brittany, Bethany, and Erika engage in a deep conversation with Piotr Sarna, co-author of 'Writing for Developers.' They explore the journey of co-authoring a book, the importance of writing in engineering, and the challenges and joys of technical writing. The discussion also touches on the significance of blogging as a continuation of learning and sharing knowledge, as well as the role of writing culture in engineering teams. The crew kicks off the next book club, where the Overcommitted engineers will be reading Writing for Developers together over the next 2 months!TakeawaysWriting a book can be seen as a series of extended blog posts.There is a gap in resources for writing engaging blog posts for developers.Good writing in tech should have an educational aspect.Writing culture in engineering teams enhances clarity and collaboration.The book 'Writing for Developers' fills a niche in technical writing resources.Embracing cringe-worthy writing experiences is part of the learning process.LinksPiotr Sarna on LinkedIn: https://www.linkedin.com/in/sarna-dev/Cynthia Dunlop on LinkedIn: https://www.linkedin.com/in/cynthiadunlop/Piotr and Cynthia's first book: Database performance at scale: https://bookshop.org/p/books/database-performance-at-scale-a-practical-guide-cynthia-dunlop/f384c1f0d973803c?ean=9781484297100&next=t Writing for Developers book: https://bookshop.org/p/books/writing-for-developers-blogs-that-get-read-cynthia-dunlop/af343340c60cd806?ean=9781633436282&next=tWrite that blog!: https://writethat.blog/Writing for Developers GitHub Repo: https://github.com/scynthiadunlop/WritingForDevelopersBookDiscord community for Overcommitted: https://discord.gg/fxvEjs7fHostsOvercommitted: https://overcommitted.devBethany Janos: https://github.com/bethanyj28Brittany Ellich: https://brittanyellich.comEggyhead: https://github.com/eggyhead

Reposted
Brittany Ellich (@brittanyellich.com)

Post details
Do you write blog posts, documentation, or anything for software engineers? Do you want to? Join us for the Writing for Developers book club with @overcommitted.dev, officially kicking off now! 🚀 Chapters 1+2 now, first discussion Friday. Join us in Discord to chat about it: discord.gg/d9gZyYuqKd https://discord.gg/d9gZyYuqKd
Listened to
Ep. 37 | Being Unreasonable with Jason Lengstorf by Overcommitted

Post details
SummaryIn this episode of the Overcommitted Podcast, hosts Bethany, Brittany, and Erika engage in a deep conversation with Jason Lengstorf about the concept of being unreasonable in the tech industry. Jason shares his journey of embracing unreasonableness to pursue big ideas, the importance of community and networking, and how to navigate risks in career decisions. They discuss the value of non-traditional backgrounds in tech, the process of learning and consolidating information, and the creative approaches that can lead to innovative projects. The conversation wraps up with Jason sharing his future projects and reflections on the tech landscape.TakeawaysBeing unreasonable and having big audacious goals can lead to unexpected opportunities.Surround yourself with ambitious people that can inspire growth.Recognize when to pivot in your career.Networking is often more valuable than formal education.Learning is an active process, not just passive consumption.Creative coding can lead to innovative solutions.Take (calculated) risks. It can help you achieve your goals.Community support is crucial in navigating career changes.Being slow to adopt new technologies might not be a bad thing.LinksJason Lengstorf: https://jason.energyCodeTV: https://codetv.devAll things open talk: https://www.youtube.com/watch?v=goVNPN6fVwQBytes.dev: https://bytes.devChar Stiles: https://www.instagram.com/charstilesBuiltin: https://builtin.comHostsOvercommitted: https://overcommitted.devBethany Janos: https://github.com/bethanyj28Brittany Ellich: https://brittanyellich.comEggyhead: https://github.com/eggyhead

Listened to
Fork Around And Find Out | Objecting to storage

Post details
If the Internet is a big computer, Amazon s3 is the hard drive. So what happens when a single typo breaks the Internet's hard drive? On this episode of Fork Around and Find Out we review the s3 outage from 2017. It wasn't that long ago and yet it seems everyone has forgotten.Please leave a...

Listened to
The code, prose & pods that shaped 2025 (Changelog News #174)

Post details
This episodes diverges from our traditional fare. I’ve reviewed the 49 previous editions and picked (IMHO) the coolest code, best prose & my favorite podcast episode from each month!
Listened to
Cup o' Go | All software sucks... then you die. But first: GopherCon 2026 dates and location announced!

Post details
Gin is a very bad software library by Efron LichtBun SQL injection via error messagesModernizing Reddit's Comment Backend Infrastructure by Katie ShannonInterview with Erik St. Martin & Johnny BoursiquotGopherCon

Week Notes 25#50 (3 mins read).
What happened in the week of 2025-12-08?
Listened to
Down the Linux rabbit hole with Alex Kretzschmar (Changelog & Friends #121)

Post details
Alex Kretzschmar joins Adam for a trip down the Linux rabbit hole -- Docker vs Podman, building a Kubernetes cluster, ZFS backups with zfs.rent, bootc, favorite Linux distros, new homelab tools built with AI, self-hosting Immich, content creation, Plex and Jellyfin, the future of piracy and more.
Listened to
Ep. 36 | Navigating the future of AI agent security with Dan Moore by Overcommitted

Post details
SummaryIn this episode of the Overcommitted Podcast, Erika and Brittany discuss the evolving landscape of AI agents and their implications for security and identity management. Joined by expert Dan Moore, they explore the challenges posed by non-deterministic agents, the importance of granular permissions, and the need for developers to be aware of security practices as AI technology advances. The conversation also touches on industry standards, the role of developers in navigating these changes, and personal reflections on the future of AI.TakeawaysAI agents are changing the landscape of software development.Non-deterministic agents present new security challenges.Granular permissions are essential for securing AI agents.Developers must be aware of security practices in AI.Industry standards for AI security are still evolving.Separation of concerns can enhance security for agents.The role of identity and authorization is critical in AI.Business implications of AI agents are significant.Developers should stay close to business needs and problem-solving.The future of AI will require new skills and awareness. LinksDan Moore on LinkedIn: www.linkedin.com/in/mooreds/ Dan Moore on Bluesky: https://bsky.app/profile/mooreds.comSimon Willison - The Lethal Trifecta: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ FusionAuth: https://fusionauth.io/ AGNTCY: https://agntcy.org/Amazon Bedrock AgentCore: https://aws.amazon.com/bedrock/agentcore/ FusionAuth Guide to OAuth: https://fusionauth.io/articles/oauth/modern-guide-to-oauth MCP and OAuth: https://aaronparecki.com/2025/04/03/15/oauth-for-model-context-protocol MCP Specification: https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization HostsOvercommitted: https://overcommitted.devBrittany Ellich: https://brittanyellich.com Eggyhead: https://github.com/eggyhead

Listened to
Break | Nearly A Year

Post details
Welcome back to Break, a Fallthrough aftershow! In this episode, the panel continues their conversation from Fallthrough #49.Enjoying the aftershow? Let us know on social media! If you prefer to watch instead of just listen, head over to YouTube where you watch this episode of Break!Thanks for...

Listened to
Fallthrough | Project Management 2 Shell

Post details
Another Cloudflare outage. A CVSS 10.0 React RCE vulnerability. We've been dealing with quite a lot these last few weeks. In this week's episode, Kris and Matt discuss the outage and vulnerability and have a deeper discussion about project management and how all of these things relate to each...

Listened to
Breaking Change v45 - Developer Strap-on
by

Post details
This may be the version 45 release of Breaking Change, but when you factor in its Hotfixes and Feature Release entries, this is somehow the 50th episode of the…

Reposted
ADHD Jesse (@adhdjesse@mastodon.social)
Post details
Strengths: works well under pressure Weaknesses: doesn’t work otherwise
Listened to
Cup o' Go | 🪪 Certificate chains, Dingo, and ML in Go with Riccardo Pinosio and Jan Pfeifer

Post details
Visit https://cupogo.dev/ for all the links. Seriously, we have the entire internet there!... with enough click depth, that is🪪 Go 1.25.5 and Go 1.24.11 are released with x509-related security fixes👉 spec: allow type parameter as the RHS in an alias type declaration🐾 DingoLightning roundGoWest...

Listened to
Breaking Change v48 - Coil Whine
by

Post details
I'm experiencing what breathing out of my nose properly feels like for the first time. Everything is new and wondrous and I've never felt so optimistic. This…

Listened to
Blocking Software Supply Chain Attacks with Feross Aboukhadijeh - Software Engineering Daily
by

Post details
Modern software relies heavily on open source dependencies, often pulling in thousands of packages maintained by developers all over the world. This accelerates innovation but also creates serious supply chain risks as attackers increasingly compromise popular libraries to spread malware at scale. Feross Aboukhadijeh is the founder and CEO of Socket which is a security

I may be attending
Listened to
Open Source Security: Updating open source dependencies with Jamie Tanna

Post details
Josh discusses updating open source dependencies with Jamie Tanna. Jamie works on Renovate which gives them a lot of insight into the challenges of keeping your open source updated. We discuss the challenges of semantic versioning, supply chain security, and AI-generated code. If you're new or old to the world of open source dependencies, there's something to learn from this chat. The show notes and blog post for this episode can be found at
I'm on Open Source Security: Updating open source dependencies (1 mins read).

Announcing my appearance as a guest on the Open Source Security podcast, talking about Renovate and dependency updates more generally.
Week Notes 25#49 (2 mins read).
What happened in the week of 2025-12-01?
Listened to
DevRel is unbelievably back - with swyx - Scaling DevTools

Post details
In Shawn "swyx" Wang's third appearance on the podcast, we talk about his recent interview with Mark Zuckerberg and Priscilla Chan about AI in biomedical resear...

Listened to
Very important agents with Nick Nisi (Changelog & Friends #120)

Post details
Nick Nisi joins us to dig into the latest trends from this year and how they're impacting his day-to-day coding and Vision Pro wearing. Anthropic's acquisition of Bun, the evolving JavaScript and AI landscape, GitHub's challenges and the AMP/Sourcegraph split. They dive into AI development practices, context management...